Hacker News Reader

"We are preparing to revoke certificates immediately, rather than waiting for certificates issued prior to 2017 to expire. However, even if we revoke those certificates, if your judgment is not affected and our request is rejected, there is no point in doing it. Please let us know if our request will be accepted by revoking all the certificates we issued prior to 2017."

oh lawd.....

View on HN

That quote by itself is a reason to drop a CA. If you're only going to do the things you're REQUIRED to do when you're threatened with rejection/revocation, then you shouldn't be a CA to begin with. The arrogance shown in that thread is appalling.

> If you're only going to do the things you're REQUIRED to do when you're threatened with rejection/revocation, then you shouldn't...

Have you dealt with public sector before? That's essentially status quo across the board.

Don't trouble yourself. We'll handle revoking your certs for you... ALL of them.

Reply on news.ycombinator.com